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Detailed Action 
Response to Amendment 

1 . Applicant's arguments with respect to claims 1-20 have been fully considered but are 
moot in view of the new ground(s) of rejection. 

2. Claims 1-20 are pending. 

Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Saarinen 
(Pub. No.: US 2002/0172359 Al) in view of Kara (Patent Number: 5,802,175) and Nordqvist et 
al. (Nordqvist, Pub. No.: US 2002/0191799 Al). 

As per claim 1, Saarinen teaches a method of ensuring a random number for a cryptographic 
security subsystem of a processor-based device, the method comprising the acts of: 

obtaining a seed pool comprising a plurality of bits for generating the random number 
(Saarinen page 2 par. 0022 lines 7-10 and par. 0014); 

Saarinen doesn't explicitly teach remotely storing seed pool; 

However Kara discloses: remotely storing a seed pool via a network (Kara col. 6 lines 3- 
15, Kara col. 3 lines 51-58 and col. 2 lines 43-46; portable memory device/Touch Memory 
remotely providing/storing seed values for key generation to PC/processor-based); and 
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Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to remotely seeding starting values to generate session key because it 
would securely transmit/store seed values remotely through computer network and/or 
telecommunications for key generation and decryption of data. 

Saarinen and Kara fail to explicitly disclose restoring the seed pool backup to local 
memory following a power loss event causing loss to the seed pool. 

However Nordqvist discloses restoring the seed pool backup to local memory following 
a power loss event causing loss to the seed pool (Nordqvist page 2 par. 0023; 
retaining/restoring/repopulating data/initial value/algorithm stored on RAM/power dependent 
memory during power interruptions/loss or removal of battery and loss of data). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Nordqvist within the combination system of 
Saarinen and Kara because it is well known to backup a data during battery replacement or 
power/data loss. One would have been motivated to incorporate the teachings of bucking up 
data/seed because it would retain/replace the seed data during battery replacement or power 
interruptions (Nordqvist page 2 par. 0023). 

As per claim 1 1, Saarinen teaches a method of restoring a seed pool for generating a random 
number for a security system, the method comprising the acts of: 

transmitting a periodically the seed pool to the security system (Saarinen page 4 par. 
0071; periodically re-seeding upon each new instance of new input entropy); 
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seed pool for use in generating the random number (Saarinen page 2 par. 0022 lines 7-10 
and fig. 5B element 518); 

Saarinen doesn't explicitly teach remotely seeding or storing of seed values remotely; 

However Kara discloses: transmitting seed pool to the security system via a network 
(Kara col. 6 lines 3-15, Kara col. 3 lines 51-58 and col. 2 lines 43-46; portable memory 
device/Touch Memory remotely providing seed values for key generation); and 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to remotely seeding starting values to generate session key because it 
would securely transmit seed values remotely through computer network and/or 
telecommunications for key generation and decryption of data. 

Saarinen and Kara fail to explicitly disclose repopulating local memory of the security 
system with the stored backup following loss of the seed pool; 

However Nordqvist discloses: 

transmitting a periodically stored backup of the seed pool (initial value or algorithm or 
data) to the security system following loss of the seed pool from the security system (Nordqvist 
page 2 par. 0023; retaining/restoring/repopulating data/initial value/algorithm stored on 
RAM/power dependent memory during power interruptions/loss or removal of battery and loss 
of data); and 

repopulating local memory of the security system with the stored backup (Nordqvist page 
2 par. 0023; retaining/restoring/repopulating data/initial value/algorithm stored on RAM/power 
dependent memory during power interruptions/loss or removal of battery and loss of data). 
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Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Nordqvist within the combination system of 
Saarinen and Kara because it is well known to backup a data during battery replacement or 
power/data loss. One would have been motivated to incorporate the teachings of bucking up 
data/seed because it would retain/replace the seed data during battery replacement or power 
interruptions (Nordqvist page 2 par. 0023). 

As per claim 17, Saarinen teaches a security system, comprising: 
a security subsystem, comprising: 

a power dependent memory device (Saarinen page 3 par. 0030); 

a limited life battery for the power dependent memory device (Saarinen page 3 par. 

0030); 

a seed pool stored on the power dependent memory device, wherein the seed pool 
comprises a plurality of random bits (Saarinen page 2 par. 0014); and 

security logic configured to generate a cryptographic key to establish a secure 
communication session between the electronic device and an external device, wherein the 
security logic generates the cryptographic key from the seed pool (Saarinen page 1 par. 0002 and 
page 2 par. 0022 lines 7-10; generation of session key from seed); and 

a control module configured for periodically storing the seed pool in the remote storage 
device (Saarinen page 4 par. 0071; periodically re-seeding upon each new instance of new input 
entropy); 

Saarinen doesn't explicitly teach remotely seeding or storing of seed values remotely; 
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However Kara discloses: a security system, comprising: 

a remote storage device (Kara col. 6 lines 3-15, Kara col. 3 lines 51-58 and col. 2 lines 
43-46; portable memory device/Touch Memory remotely providing seed values for key 
generation); and 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to remotely seeding starting values to generate session key because it 
would securely transmit seed values remotely through computer network and/or 
telecommunications for key generation and decryption of data. 

Saarinen and Kara fail to explicitly disclose backup following replacement of the limited 
life battery. 

However Nordqvist discloses a restoration control module configured for repopulating 
the power dependent memory device with the backup following replacement of the limited life 
battery (Nordqvist page 2 par. 0023; retaining/restoring/repopulating data/initial value/algorithm 
stored on RAM/power dependent memory during power interruptions/loss or removal of battery 
and loss of data). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Nordqvist within the combination system of 
Saarinen and Kara because it is well known to backup a data during battery replacement or 
power loss. One would have been motivated to incorporate the teachings of bucking up data/seed 
because it would retain/replace the seed data during battery replacement or power interruptions 
(Nordqvist page 2 par. 0023). 
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As per claim 2, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
addition the combination teach the method, wherein the act of remotely storing the seed pool 
comprises the act of periodically storing the seed pool backup on a remote storage device 
(Saarinen page 4 par. 0071; periodically re-seeding upon each new instance of new input entropy 
and Kara col. 6 lines 3-15, and col. 2 lines 43-46). The rational for combining are the same as 
claim 1 above. 

As per claims 3 and 14, Saarinen, Kara, and Nordqvist teach all the subject matter as described 
above. In addition the combination teaches the method wherein the act of periodically storing the 
seed pool backup comprising the act of periodically storing the seed pool in a remote storage 
device via the network at an interval based on a write cycle characteristic of the remote storage 
device to maintain availability of the seed pool as the periodically stored backup (Saarinen page 
3 par. 0033 lines 7-10 and Kara col. 6 lines 3-15, and col. 2 lines 43-46). The rational for 
combining are the same as claim 1 above. 

As per claim 4, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
addition Saarinen teaches the method, comprising the act of modifying the seed pool backup 
with additional random bits to ensure randomness for generating the random number (Saarinen 
page 1 par. 0003 lines 5-7 and par. 0007-0008). 

As per claim 5, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
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addition Saarinen teaches the method, wherein the act of modifying the seed pool backup with 
additional random bits comprises the act of capturing one or more bits of data from a free- 
running timer (Saarinen page 1 par. 0003 lines 5-7 and par. 0007-0008). 

As per claims 6 and 13, Saarinen, Kara, and Nordqvist teach all the subject matter as described 
above. In addition Saarinen teaches the method, wherein the act of modifying the seed pool 
backup with additional random bits comprises the act of capturing one or more bits of data from 
a local hardware device (Saarinen page 2 par. 0014). 

As per claim 7, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
addition the combination teaches the method, wherein the act of restoring the seed pool backup 
comprises the act of automatically retrieving the seed pool backup via the network upon 
restoring power to the cryptographic security subsystem (Nordqvist page 2 par. 0023, and Kara 
col. 6 lines 3-15, and col. 2 lines 43-46). The rational for combining are the same as claim 1 
above. 

As per claim 8, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
addition the combination teach the method, wherein the act of automatically retrieving the seed 
pool backup comprises requesting the seed pool backup from a remote management system 
(Kara col. 6 lines 3-15, and col. 2 lines 43-46 and Nordqvist page 2 par. 0023). The rational for 
combining are the same as claim 1 above. 
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As per claim 9, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. In 
addition Nordqvist teaches the method, wherein the power loss event is a battery failure resulting 
in memory loss of the seed pool from the local memory (Nordqvist page 2 par. 0023). The 
rational for combining are the same as claim 1 above. 

As per claim 10, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition the combination teach the method, wherein the act of restoring the seed pool backup 
comprises the act of transmitting the seed pool backup from remote storage to the local memory 
via the network following a battery replacement for the local memory (Nordqvist page 2 par. 
0023, and Kara col. 3 lines 51-58). The rational for combing are the same as claim 1 above. 

As per claim 12, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, Saarinen teaches the method, comprising the act of modifying the periodically stored 
backup with additional random bits to ensure randomness (Saarinen page 1 par. 0003 lines 5-7 
and par. 0007-0008). 

As per claim 15, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, Nordqvist teaches the method, wherein the act of transmitting the periodically stored 
backup comprises the act of transferring the periodically stored backup to the security system 
after restoring battery power to the security system (Nordqvist page 2 par. 0023). The rational for 
combining are the same as claim 1 1 above. 
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As per claim 16, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, the combination teach the method, wherein the act of transferring the periodically 
stored backup comprises automatically initiating a seed pool restoration event using the 
periodically stored backup stored on a remote server after restoring battery power by replacing a 
battery for the local memory of the security system (Nordqvist page 2 par. 0023, and Kara col. 3 
lines 51-57). The rational for combining are the same as claim 1 1 above. 

As per claim 18, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, Kara teaches the system, comprising a remote security interface configured for 
interacting with the security subsystem and the security backup system (Kara col. 2 lines 46-52, 
and col. 3 lines 51-57). The rational for combing are the same as claim 17 above. 

As per claim 19, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, the combination teach the system, wherein the security backup system comprises a 
seed pool modification module configured for capturing one or more bits of data from a 
hardware component and adding the one or more bits to the backup (Saarinen page 3 col 0035- 
0038 and Nordqvist page 2 par. 0023). The rational for combining are the same as claim 18 
above. 

As per claim 20, Saarinen, Kara, and Nordqvist teach all the subject matter as described above. 
In addition, Nordqvist teaches the system, wherein the security backup system comprises an 
automation module configured for automatically initiating repopulation of the memory device 
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with the backup (Nordqvist page 2 par. 0023). The rational for combining are the same as claim 
1 8 above. 
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